diff --git a/applications/sasquatch/charts/square-events/templates/ook-topics.yaml b/applications/sasquatch/charts/square-events/templates/ook-topics.yaml new file mode 100644 index 0000000000..891533e26c --- /dev/null +++ b/applications/sasquatch/charts/square-events/templates/ook-topics.yaml @@ -0,0 +1,13 @@ +--- +apiVersion: kafka.strimzi.io/v1beta2 +kind: KafkaTopic +metadata: + name: "lsst.square-events.ook.ingest" + labels: + strimzi.io/cluster: {{ .Values.cluster.name }} +spec: + partitions: 4 + replicas: 3 + config: + # http://kafka.apache.org/documentation/#topicconfigs + retention.ms: 604800000 # 1 week diff --git a/applications/sasquatch/charts/square-events/templates/ook-user.yaml b/applications/sasquatch/charts/square-events/templates/ook-user.yaml new file mode 100644 index 0000000000..0c3bb352cc --- /dev/null +++ b/applications/sasquatch/charts/square-events/templates/ook-user.yaml @@ -0,0 +1,45 @@ +--- +apiVersion: kafka.strimzi.io/v1beta2 +kind: KafkaUser +metadata: + name: ook + labels: + strimzi.io/cluster: {{ .Values.cluster.name }} +spec: + template: + secret: + metadata: + annotations: + replicator.v1.mittwald.de/replication-allowed: "true" + replicator.v1.mittwald.de/replication-allowed-namespaces: "ook" + authentication: + type: tls + authorization: + type: simple + acls: + - resource: + type: group + name: "ook" + patternType: literal + operations: + - "Read" + host: "*" + - resource: + type: topic + name: "lsst.square-events.ook.ingest" + patternType: literal + operations: + - "Describe" + - "Read" + - "Write" + host: "*" + - resource: + type: topic + name: "lsst.square-events.squarebot.slack.app.mention" + patternType: literal + type: allow + host: "*" + operations: + - "Read" + - "Describe" + host: "*"